41 matches found
CVE-2012-4793
CVE-2012-4793 is rejected and does not represent an active vulnerability entry.
CVE-2011-4793
CVE-2011-4793 is rejected and not used; does not represent an active vulnerability entry.
CVE-2016-4793
The clientIp function in CakePHP 3.2.4 and earlier allows remote attackers to spoof their IP via the CLIENT-IP HTTP header...
CVE-2016-4793
The clientIp function in CakePHP 3.2.4 and earlier allows remote attackers to spoof their IP via the CLIENT-IP HTTP header...
CVE-2016-4793
The CVE-2016-4793 issue affects CakePHP up to version 3.2.4, where the clientIp function can be coerced to accept spoofed IPs via the CLIENT-IP HTTP header. This enables remote IP spoofing and may bypass IP-based access controls and enable injection-like issues as described in linked advisories. ...
CVE-2015-4793
CVE-2015-4793 concerns Oracle Communications Convergence in Oracle Communications Applications 2.0 and 3.0.1. The vulnerability is described as unspecified and remote-exploitable, potentially affecting confidentiality via unknown vectors related to the Mail Proxy. The NVD record assigns a CVSSv2 ...
CVE-2013-4793
CVE-2013-4793 affects the Umbraco CMS TemplateService component. The update function in umbraco.webservices/templates/templateService.cs (TemplateService) before version 6.0.4 does not require authentication, allowing remote attackers to execute arbitrary ASP.NET code via a crafted SOAP request. ...
CVE-2014-4793
IBM WebSphere MQ 8.x before 8.0.0.1 contains a defect in CHLAUTH enforcement related to CONNAUTH, allowing remote authenticated users to bypass queue-manager access restrictions under certain circumstances. Affected product/version: IBM WebSphere MQ 8.x prior to 8.0.0.1. Root cause: improper enfo...
CVE-2014-4793
IBM WebSphere MQ 8.x before 8.0.0.1 does not properly enforce CHLAUTH rules for blocking client connections in certain circumstances related to the CONNAUTH attribute, which allows remote authenticated users to bypass intended queue-manager access restrictions via unspecified vectors...
CVE-2010-4793
CVE-2010-4793 affects Site2Nite Auto e-Manager (Detail.asp) via the ID parameter. The root cause is an SQL injection vulnerability in the detail.asp page, allowing remote attackers to execute arbitrary SQL commands. Concretely, the vulnerability is triggered through the ID parameter without prope...
CVE-2010-4793
creationtimestamp| type| source ---|---|--- 2010-10-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15230...
CVE-2009-4793
The CVE-2009-4793 issue affects BandSite CMS 1.1.4, specifically the adminpanel/scripts/addphotos.php functionality. Unrestricted file upload in the addphotos action of adminpanel/index.php allows remote authenticated administrators to upload a file with an executable extension and then access it...
CVE-2009-4793
creationtimestamp| type| source ---|---|--- 2009-03-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8309...
CVE-2008-4793
CVE-2008-4793 affects Drupal 5.x before 5.11?specifically the node module API , which allows remote attackers to bypass node validation and cause unspecified other impact via unknown vectors tied to contributed modules. The issue is documented across multiple sources (NVD, OSV, GHSA, OSS/Nessus) ...
CVE-2007-4793
CVE-2007-4793 describes a buffer overflow in the xlplm component of IBM AIX 5.2/5.3, within plm.server.rte, that allows local privilege escalation via unspecified vectors. The affected products are AIX versions 5.2 and 5.3; the exact vulnerable code path is not detailed in the provided documents....
CVE-2006-4793
Multiple SQL injection vulnerabilities in icerik.asp in TualBLOG 1.0 allow remote attackers to execute arbitrary SQL commands, as demonstrated by the icerikno parameter...
CVE-2006-4793
CVE-2006-4793 involves multiple SQL injection vulnerabilities in icerik.asp of TualBLOG 1.0. The flaw allows remote attackers to execute arbitrary SQL commands via the icerikno parameter, enabling unauthorized data access or manipulation. The CVSS v2 base score is 7.5 (HIGH), with network attack ...
